PT-2024-39116 · Totolink · Totolink Ac1200 T8

Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 T8 version 4.1.5cu.861 B20230220 Description: A critical vulnerability has been found in the TOTOLINK AC1200 T8, affecting the setWiFiRepeaterCfg function of the file /cgi-bin/cstecgi.cgi. The manipulation of the password...

CVE-2024-45771

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...

CVE-2024-45771

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...

CVE-2024-45771

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...

PT-2024-31761 · Rapidcms · Rapidcms

Name of the Vulnerable Software and Affected Versions: RapidCMS version 1.3.1 Description: A SQL injection issue was discovered in RapidCMS, which occurs via the password parameter at the "/resource/runlogin.php" API endpoint. This allows for potential exploitation of the system. Recommendations:...

CVE-2024-45771

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...

OpenRapid RapidCMS 安全漏洞

OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A security vulnerability exists in OpenRapid RapidCMS v1.3.1, which originates from a SQL injection vulnerability via the password parameter on /resource/runlogin.php...

CVE-2024-45771

RapidCMS v1.3.1 contains a SQL injection via the password parameter at /resource/runlogin.php. Root cause appears to be unsanitized input in the login endpoint, enabling high-impact attacks (CVSS 3.1 base score 9.8, CRITICAL). Public exploit details are not provided in the documents. Some sources...

CVE-2024-42566

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php...

CVE-2024-42566

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php...

School-Management-System 安全漏洞

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the password parameter of the login.php page...

PT-2024-30026 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the password parameter at the "login.php" endpoint. There is no information provided about the estimate...

PT-2024-30239 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is a stack overflow that allows attackers to cause a Denial of Service DoS via a crafted POST request. This is achieved by exploiting the pptpPPW parameter in the fromAdvSetWan function...

Tenda FH1206 安全漏洞

Tenda FH1206 is a dual-band wireless router from Tenda, designed for large homes with fiber optics. The Tenda FH1206 suffers from a buffer overflow vulnerability, which originates from a buffer overflow vulnerability in the PPPOEPassword parameter of the fromAdvSetWan function, which can be...

Tenda FH1201 缓冲区错误漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the PPPOEPassword parameter in the fromAdvSetWan function containing a denial of service. No detailed vulnerability details are provided at this time...

TOTOLINK A3100R password parameter buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A3100R version V4.1.2cu.5050B20200504, which originates from the password parameter of the loginauth function failing to correctly validate the length and siz...

CVE-2024-42546

TOTOLINK A3100R V4.1.2cu.5050B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function...

CVE-2024-42546

TOTOLINK A3100R V4.1.2cu.5050B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function...

CVE-2024-42546

CVE-2024-42546 affects TOTOLINK A3100R, version 4.1.2cu.5050_B20200504, with a buffer overflow in the password parameter of the loginauth function . Red‑hat CNVD and other sources describe potential remote exploitation that could lead to arbitrary code execution or denial of service. The vulnerab...

PT-2024-30008 · Totolink · Totolink A3100R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 4.1.2cu.5050 B20200504 Description: The issue is a buffer overflow vulnerability in the password parameter in the loginauth function. This vulnerability can be exploited, but no specific details about the estimated...